PT-2023-28065 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche affected versions not specified Description: The issue concerns incorrect default permissions in Ivanti Avalanche, allowing for local privilege escalation. Recommendations: At the moment, there is no information about a newer...

PT-2023-24233 · Solarwinds · Solarwinds Network Configuration Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Network Configuration Manager affected versions not specified Description: The issue allows users with administrative access to the SolarWinds Web Console to obtain sensitive information. Recommendations: At the moment, there is no...

PT-2023-28476 · Unknown · Ifaa Service

Name of the Vulnerable Software and Affected Versions: Ifaa service affected versions not specified Description: The issue is related to a missing permission check in the Ifaa service, allowing potential local information disclosure without requiring additional execution privileges. This could le...

PT-2023-18137 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a use after free in Bluetooth, which could lead to code-execution and paired device escalation of privilege in the privileged Bluetooth process. No additional...

PT-2023-18172 · Unknown · Setupwizard

Name of the Vulnerable Software and Affected Versions: Setup Wizard affected versions not specified Description: The issue is related to an insecure default value in the Setup Wizard, which could allow saving a WiFi network. This could lead to local escalation of privilege with no additional...

PT-2023-12215 · Isula · Isula

Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: The issue allows attackers to execute arbitrary code when malicious images are pulled by isula pull. Recommendations: At the moment, there is no information about a newer version that contain...

PT-2023-12217 · Isula · Isula

Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: The issue occurs when the isula export command is used to export a container to an image and the container is controlled by an attacker, allowing the attacker to escape the container...

PT-2023-27290 · Fillui · Fillui

Name of the Vulnerable Software and Affected Versions: FillUi affected versions not specified Description: The issue in FillUi allows an attacker to view another user's images due to a confused deputy, potentially leading to local information disclosure without requiring additional execution...

PT-2023-30150 · Elastic · Sharepoint Online Python Connector

Name of the Vulnerable Software and Affected Versions: Elastic Sharepoint Online Python Connector affected versions not specified Description: An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python Connector. If a...

PT-2023-10705 · Abus · Abus Tvip Cameras

Name of the Vulnerable Software and Affected Versions: ABUS TVIP cameras affected versions not specified Description: The issue is related to incorrect access control, allowing unauthenticated remote attackers to view the "/video.mjpg" video stream. Recommendations: At the moment, there is no...

PT-2023-28371 · Unknown · Eisbaer Scada

Name of the Vulnerable Software and Affected Versions: EisBaer Scada affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This allows an attacker to access files or directories outside the...

PT-2023-31803 · Zephyr · Zephyr Stm32 Crypto Driver

Name of the Vulnerable Software and Affected Versions: Zephyr STM32 Crypto driver affected versions not specified Description: A potential buffer overflow vulnerability exists in the Zephyr STM32 Crypto driver. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-6456 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to an information disclosure vulnerability in Microsoft Edge, based on Chromium. It involves a lack of protection for sensitive data. Exploitation...

PT-2023-29647 · Unknown +1 · Stb Vorbis +1

Name of the Vulnerable Software and Affected Versions: stb vorbis affected versions not specified Description: The issue is related to a memory allocation failure in the start decoder function when processing a crafted ogg vorbis file. This failure causes the function to return early, setting...

PT-2023-7229 · Gstreamer +10 · Gstreamer +10

Name of the Vulnerable Software and Affected Versions: GStreamer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of GStreamer. The specific flaw exists within the parsing of MXF video files, resulting from the lac...

PT-2023-29096 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Device authentication module affected versions not specified Description: The issue concerns brute-force attacks on the device authentication module. Successful exploitation may affect service confidentiality. Recommendations: At the moment,...

PT-2023-20612 · Xiaomi · Xiaomi Router

Name of the Vulnerable Software and Affected Versions: Xiaomi Router affected versions not specified Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a Command Injection. This allows for Command Injection in the Xiaomi Router...

PT-2023-36275 · Conmon · Conmon

Name of the Vulnerable Software and Affected Versions: conmon affected versions not specified Description: The issue is related to conmon being rebuilt with go1.21. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2023-6131 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Windows operating system. This can allow an attacker to elevate their privileges. Recommendations: At the...

PT-2023-5959 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Dynamics 365, which can be exploited by a remote attacker to gain unauthorized access to protecte...